4712 matches found
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Webglimpse: information leak, crossite scripting, directory traversal, authentication bypass...
凹丫丫新闻发布系统WebBasicInfo.asp管理员权限未验证漏洞
凹丫丫新闻发布系统是一款ASP程序结合ACC和MYSQL的CMS系统 漏洞所在路径地址admin/WebBasicInfo.asp 程序员未对该页面写入管理员权限验证代码,可以直接输入代码绕过进入网站后台 进入WebBasicInfo.asp可以对网站名称,网站关键字,网站介绍,底部版权信息进行修改. 可以关闭公告.评论.友情连接功能 凹丫丫新闻发布系统4.7ACC版 其他版本还未测试 等待官方补丁程序或者自己编译管理员权限验证代码...
Old A horse black method-vulnerability warning-the black bar safety net
Originally when the default database is ASP, plug horses, cross-site, and inject all there The way injection: showmb. asp % Set conn = Server. CreateObject"ADODB. Connection" conn. open "Provider = Microsoft. Jet. OLEDB. 4. 0;Data Source = " & Server. MapPath"laoa123qafd5q. asp" set rs = server...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
CVE-2008-6739
Todd Woolums ASP Download management script 1.03 does not require authentication for setupdownload.asp, which allows remote attackers to gain administrator privileges via a direct request...
Design/Logic Flaw
Todd Woolums ASP Download management script 1.03 does not require authentication for setupdownload.asp, which allows remote attackers to gain administrator privileges via a direct request...
CVE-2008-6739
CVE-2008-6739 affects Todd Woolums ASP Download management script 1.03. The issue is that setupdownload.asp does not require authentication, allowing a remote attacker to obtain administrator privileges via a direct request. The documented impact is elevation to administrator access, with exploit...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
CVE-2009-1322
ASP Product Catalog 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for database/aspProductCatalog.mdb...
CVE-2009-1321
Cross-site scripting XSS vulnerability in search.asp in ASP Product Catalog 1.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in search.asp in ASP Product Catalog 1.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...
CVE-2009-1322
ASP Product Catalog 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for database/aspProductCatalog.mdb...
CVE-2009-1322
CVE-2009-1322 affects ASP Product Catalog 1.0 where sensitive data is stored under the web root with insufficient access control. An attacker can directly request database/aspProductCatalog.mdb to download a database containing user credentials. The connected records confirm the presence of this ...
CVE-2009-1321
CVE-2009-1321 is an XSS vulnerability in ASP Product Catalog 1.0's search.asp, exploitable via the keywords parameter to inject arbitrary script/HTML. The issue stems from unsanitized input in the search function, enabling remote attackers to affect victims’ browsers. CVSS 2.0 base score 4.3 (MED...